See inside any binary.
Start free on the mainstream formats. One flat Pro price unlocks every format, all 42 architectures, and firmware — no à-la-carte chipset licensing like IDA Pro or Binary Ninja.
Free
Researchers, students, the curious
No card. Try it on the mainstream formats — uploads join the public corpus.
- Windows · Linux · macOS — PE · ELF · Mach-O
- Hex viewer · disassembly · function lookup
- Behavioral profile + capability map
- SBOM — libraries detected in the binary
- Search the public corpus
- Severity counts on CVE findings
Pro
RE analysts, consultants, security teams
The full engine — every format, every chipset, firmware — kept private, plus the API.
- Firmware unpacking & analysis
- All 6 formats · all 42 architectures
- Decompile to Rust (99.7% compile)
- CWE findings + full per-CVE detail
- Binary diff & package diff
- Private workspace — uploads stay yours
- REST API · query DSL · MCP server
Enterprise
CISOs, gov & defense, OEM partners
Fleet · from $25K/yr
Fleet-wide binary intelligence, on your infrastructure.
- Everything in Pro, fleet-wide
- Hosts as first-class entities
- CVE → hosts-impacted rollup
- Release baselines + drift detection
- App inventory + change timeline
- SBOM export · self-host
No à-la-carte licensing
Every format, every architecture, and firmware — one flat Pro price.
6
Executable formats
42
Architectures
115
Firmware unpackers
10
Source languages
430
ATT&CK techniques
87,828
Library signatures
Compare tiers
Questions
On Free, binaries you upload join the public corpus — that's the deal that keeps Free free. On Pro and Enterprise, uploads land in a private workspace and never become public.
Free covers the desktop platforms — Windows, Linux, and macOS binaries (PE, ELF, Mach-O) on common architectures — so you can validate it works on your binaries: full behavioral profile and capability map, the SBOM (libraries inside the binary), the hex viewer, disassembly, function lookups, and corpus search. Pro unlocks the full engine — every format, all 42 architectures, and firmware unpacking — plus the deep RE outputs: decompilation to compilable Rust, CWE findings, full per-CVE detail, and binary & package diffing, a private workspace, and the API.
Free opens the desktop platforms — Windows (PE), Linux (ELF), and macOS (Mach-O) — on the common architectures: x86, x86-64, ARM, and AArch64. That's enough to validate openbinary on most binaries. The full set (all 6 formats, all 42 architectures including the embedded and exotic chipsets) and firmware unpacking are Pro.
Yes. Switch the toggle to annual and Pro is two months free — $1,490 per user per year instead of $1,788. Enterprise is quoted annually from the start.
Never. IDA Pro and Binary Ninja sell decompilers and architectures à la carte — a separate license per chipset. We don't. Free covers the mainstream formats so you can try it, and one flat Pro price then unlocks every format, all 42 architectures, and firmware. No per-chipset add-ons, ever.
Never. Analysis is 100% static — no sandbox, no execution, no network required. It's air-gap safe by design.
Free and anonymous use is rate-limited to keep the public service healthy for everyone. Pro and Enterprise run on fair use — generous enough that real work never hits a wall (a 1,000-binary firmware is a single upload, not a thousand), and we warn before we ever throttle. Re-processing a package is the one deliberately tight action, since it re-runs the full analysis.
Any machine a collector reports from — a workstation, a server, or an unpacked firmware image. Fleet rolls every binary up to the hosts that run it, so a single CVE shows exactly how many hosts are impacted.
Self-hosting and on-prem deployment are an Enterprise feature — fleet collectors and the full stack run on your infrastructure. Pro and Free run on our hosted cloud.